Breaches and incidents
Metropolitan Police Service (London): ICO reprimand and enforcement notice over unapproved use of the Auror retail-crime platform
Per Infosecurity Magazine, the ICO found Met officers and staff used the Auror intelligence-sharing platform from March 2023 to September 2024 without...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Per Infosecurity Magazine, the ICO found Met officers and staff used the Auror intelligence-sharing platform from March 2023 to September 2024 without formal approval (about 500 accounts created, 375 active), and from January to September 2024 uploaded personal data of 179 people, three under 18, including names, dates of birth and home addresses.
- Root cause: per the ICO findings reported by Infosecurity, the Met failed to follow assessment and approval processes for third-party technology and did not complete a data protection impact assessment before high-risk processing; ITPro describes it as shadow IT.
- No attacker named (regulatory finding, not an intrusion).
- The ICO issued a reprimand and an enforcement notice citing four infringements; no Met response was quoted in the articles fetched.